Cisco Adaptive Security Appliance 远程权限提升漏洞

Bugtraq ID:66747 CVE ID:CVE-2014-2126 Cisco ASA 5500系列自适应安全设备是用于提供安全和VPN服务的模块化平台，可提供防火墙、IPS、anti-X和VPN服务。 Cisco Adaptive Security Appliance ASA Software 8.25.47之前版本、8.47.5之前版本、8.71.11之前版本、9.03.10之前版本、9.13.4之前版本在实现上存在安全漏洞，这可使经过身份验证的远程用户通过Level-0 ASDM访问，利用此漏洞获取权限。 0 Cisco Adaptive Security Applianc...

Code injection

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

CVE-2014-2129

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

PT-2014-1324 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2 before 8.25.47 Cisco Adaptive Security Appliance ASA Software versions 8.4 before 8.47.5 Cisco Adaptive Security Appliance ASA Software versions 8.7 before 8.71.11 Cisco Adaptive...

PT-2014-1311 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.x through 8.25.47 Cisco Adaptive Security Appliance ASA Software versions 8.3 through 8.32.39 Cisco Adaptive Security Appliance ASA Software versions 8.4 through 8.47.8 Cisco Adaptive...

Cisco ASA SSL VPN Privilege Escalation Vulnerability

This module exploits a privilege escalation vulnerability for Cisco ASA SSL VPN aka: WebVPN. It allows level 0 users to escalate to level 15. Module Options msf use auxiliary/scanner/http/cisco/sslvpnprivesc msf undefinedsslvpnprivesc show actions ...actions... msf undefinedsslvpnprivesc set ACTI...

PT-2014-1323 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2 before 8.25.48 Cisco Adaptive Security Appliance ASA Software versions 8.4 before 8.46.5 Cisco Adaptive Security Appliance ASA Software versions 9.0 before 9.03.1 Cisco Adaptive...

ESA-2014-020: RSA Adaptive Authentication (On-Premise) Multiple Vulnerabilities

ESA-2014-020.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-020: RSA Adaptive Authentication On-Premise Multiple Vulnerabilities EMC Identifier: ESA-2014-020 CVE Identifier: CVE-2014-0637, CVE-2014-0638 Severity Rating: CVSS v2 Base Score: See below for individual scores Affected...

EMC RSA Adaptive Authentication security vulnerabilities

Crossite scripting...

CVE-2014-0638

Cross-site scripting XSS vulnerability in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue...

CVE-2014-0637

Cross-site scripting XSS vulnerability in the back-office case-management application in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue...

Cross site scripting

Cross-site scripting XSS vulnerability in the back-office case-management application in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0637

Cross-site scripting XSS vulnerability in the back-office case-management application in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0637

CVE-2014-0637 is an XSS vulnerability in RSA Adaptive Authentication (On-Premise) back-office case-management, affecting 6.x and 7.x up to 7.1 SP0 P2. The issue allows remote authenticated users to inject arbitrary script/HTML via unspecified vectors. A fix is package 7.1 SP0 P2; RSA recommends u...

CVE-2014-0638

RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 are affected by Cross-Site Scripting and Cross-Frame Scripting vulnerabilities (CVE-2014-0638). The issue involves vectors using FRAME elements in the web application, enabling an attacker to inject arbitrary script or potenti...

CVE-2014-0638

Cross-site scripting XSS vulnerability in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue...

RSA Adaptive Authentication (On-Premise)跨站脚本漏洞

CVE ID:CVE-2014-0637 RSA Adaptive Authentication是一款多用于大型金融机构的集中的、多层的认证解决方案。 RSA Adaptive Authentication存在跨站脚本漏洞，允许攻击者构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 RSA Adaptive Authentication On-Premise 6.x RSA Adaptive Authentication On-Premise 7.x RSA Adaptive Authentication On-Premise 7.1 SP0...

RSA Adaptive Authentication (On Premise)跨框架脚本攻击漏洞

Bugtraq ID:66571 CVE ID:CVE-2014-0638 RSA Adaptive Authentication 是一种全面的、基于风险的身份认证和欺诈检测平台，可实现安全性、可用性和成本之间的平衡。 RSA Adaptive Authentication On Premise Web应用在实现上存在跨框架脚本攻击漏洞，这可使经过身份验证的用户利用此漏洞错误使用框架，窃取敏感信息。 0 RSA Security Adaptive Authentication 7.x RSA Security Adaptive Authentication 6.x RSA Securit...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025...